[App] Experiment with session authentication.

Added helpers and a controller extension to authenticate the current session
token in the headers.

Enabled logging.